Privacy policy

1. Controller

E-Mail: [email protected]
Phone: +49 1520 7068364

2. Hosting: Cloudflare Pages

This portfolio is provided as a static website through Cloudflare Pages. It has no server-side application, login area or contact form.

The hosting provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Where Cloudflare processes personal data on our behalf, its Data Processing Addendum governs that processing.

For delivery and security, Cloudflare processes technical request data, including IP addresses and traffic information. Processing may take place outside the EU or EEA, including in the USA. Cloudflare states that it relies on the EU–US Data Privacy Framework for covered US transfers and on standard contractual clauses for other relevant transfers.

Where this processing is our responsibility, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable provision of this portfolio.

We do not maintain our own visitor access logs. For data processed on our behalf, Cloudflare’s Data Processing Addendum limits retention to the earlier of contract termination or when processing is no longer necessary to fulfil contractual obligations. For data Cloudflare processes for its own purposes, its privacy policy bases retention on the processing purpose and legal requirements. These terms do not specify one fixed retention period for all technical request data.

Cloudflare privacy policy ↗
Cloudflare Data Processing Addendum ↗

3. Contact by email or phone

If you contact us, we process the contact details and information you provide to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR for enquiries concerning a contract or steps prior to a contract; otherwise it is Article 6(1)(f) GDPR, based on our interest in responding to enquiries.

The information is deleted when the enquiry has been resolved and no statutory retention duties or necessary legal claims require further storage. Providing it is voluntary; without the necessary contact details we may be unable to reply.

Email enquiries are received through GMX, a service of 1&1 Mail & Media GmbH, Karlsruhe branch, Brauerstraße 48, 76135 Karlsruhe, Germany. This provider processes email addresses, message contents and technical delivery data to provide the email service.

GMX privacy information ↗

4. Language preference in your browser

After you explicitly choose DE or EN, this website stores your selection locally in your browser under the key “portfolio-language”. The value is de or en. It is used to retain your preferred language on subsequent page visits and is not sent to us by this feature.

The preference remains until you change it or delete the website data in your browser. No default value is written on the first visit. Storage is based on Section 25(2)(2) TDDDG to provide the language function you have expressly requested. Insofar as personal data is processed, the basis is Article 6(1)(f) GDPR and our interest in providing that function.

5. External links, including itch.io

This portfolio links to itch.io, YouTube, LinkedIn and a CV on Google Drive. These are ordinary links. The website does not embed games, videos or widgets from these services and does not load resources from them merely to display these links.

When you follow a link, you open the external provider’s website. That provider processes data under its own privacy policy. This may include your IP address, browser data and cookies, and may involve processing outside the EU or EEA.

itch.io privacy policy ↗

6. Analytics and tracking

The portfolio uses no visitor analytics, advertising trackers or tracking cookies. Optional Cloudflare Web Analytics is disabled for this Pages project, and Zaraz is not integrated. The technical processing needed to deliver and secure the site is described in section 2. The only browser storage used by the portfolio code is the language preference described in section 4.

7. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. You may object under Article 21 GDPR, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR.

Where processing is based on consent, you can withdraw it at any time with effect for the future. You may also lodge a complaint with a data protection supervisory authority, especially in the member state of your habitual residence, place of work or the alleged infringement. You can contact us using the details above to exercise your rights.

Bavarian State Office for Data Protection Supervision ↗

8. Automated decisions

We do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR on this portfolio.